Hi, Sorry this is going to come across as a dumb question. And I know this seems like an odd place to ask but I'm not sure where else to ask, so please bare with me. I work for a company that has to be PCI compliant as we deal with banks. As part of our compliance we have to submit vulnerability scans quarterly. We use Symantec's CCS (ultimately rapid 7) scanning to check for vulnerabilities. A very common one across our systems is Java being out of date. For example a lot of systems report that they need Java 7 update 7. I have created a Java update with SCUP and have distributed it via SCCM to update Java 7 to update 9. How ever upon a rescan we still get critical vulnerabilities that Java 7 update 7 should be installed even though those systems definitely have Update 9 installed. So I need to know if I jump from say update 2 to update 9 will that fix the issues update 7 was suppose to fix or do I have to update Java with consecutive updates? I'm hoping that the CCS system is just being dumb. Thank in advance for your help.

Yes if you jump from update 2 to update 9, it should address the issues in update 7.Mark D. Albin IT Master Services www.itmasterservice.com (775) 229-4254

Yes if you jump from update 2 to update 9, it should address the issues in update 7.Mark D. Albin IT Master Services www.itmasterservice.com (775) 229-4254

Thanks Mark, thats what i thought but my boss works with reports and pictures and they telling a different story. Thanks again for the confirmation.